From 281ddaefc46315d9eb71d3c6656466fff77d2247 Mon Sep 17 00:00:00 2001 From: yunohost-bot Date: Wed, 22 May 2024 02:47:08 +0000 Subject: [PATCH 01/14] Auto-update READMEs --- ALL_README.md | 4 +++- README.md | 2 +- README_es.md | 43 +++++++++++++++++++++++++++++++++++++++++++ README_eu.md | 43 +++++++++++++++++++++++++++++++++++++++++++ README_zh_Hans.md | 43 +++++++++++++++++++++++++++++++++++++++++++ 5 files changed, 133 insertions(+), 2 deletions(-) create mode 100644 README_es.md create mode 100644 README_eu.md create mode 100644 README_zh_Hans.md diff --git a/ALL_README.md b/ALL_README.md index 3d6c579..152f2e7 100644 --- a/ALL_README.md +++ b/ALL_README.md @@ -1,6 +1,8 @@ # All available README files by language - [Read the README in English](README.md) +- [Lea el README en español](README_es.md) +- [Irakurri README euskaraz](README_eu.md) - [Lire le README en français](README_fr.md) - [Le o README en galego](README_gl.md) -- [Leggi il “README” in italiano](README_it.md) +- [阅读中文（简体）的 README](README_zh_Hans.md) diff --git a/README.md b/README.md index 7317dba..844d45a 100644 --- a/README.md +++ b/README.md @@ -9,7 +9,7 @@ It shall NOT be edited by hand. [![Install Pepettes with YunoHost](https://install-app.yunohost.org/install-with-yunohost.svg)](https://install-app.yunohost.org/?app=pepettes) -*[Read this README is other languages.](./ALL_README.md)* +*[Read this README in other languages.](./ALL_README.md)* > *This package allows you to install Pepettes quickly and simply on a YunoHost server.* > *If you don't have YunoHost, please consult [the guide](https://yunohost.org/install) to learn how to install it.* diff --git a/README_es.md b/README_es.md new file mode 100644 index 0000000..0a079c9 --- /dev/null +++ b/README_es.md @@ -0,0 +1,43 @@ + + +# Pepettes para Yunohost + +[![Nivel de integración](https://dash.yunohost.org/integration/pepettes.svg)](https://dash.yunohost.org/appci/app/pepettes) ![Estado funcional](https://ci-apps.yunohost.org/ci/badges/pepettes.status.svg) ![Estado En Mantención](https://ci-apps.yunohost.org/ci/badges/pepettes.maintain.svg) + +[![Instalar Pepettes con Yunhost](https://install-app.yunohost.org/install-with-yunohost.svg)](https://install-app.yunohost.org/?app=pepettes) + +*[Leer este README en otros idiomas.](./ALL_README.md)* + +> *Este paquete le permite instalarPepettes rapidamente y simplement en un servidor YunoHost.* +> *Si no tiene YunoHost, visita [the guide](https://yunohost.org/install) para aprender como instalarla.* + +## Descripción general + +A simple donation form with stripe + +**Versión actual:** 1.0.1~ynh6 + +**Demo:** +## Documentaciones y recursos + +- Documentación administrador oficial: +- Repositorio del código fuente oficial de la aplicación : +- Catálogo YunoHost: +- Reportar un error: + +## Información para desarrolladores + +Por favor enviar sus correcciones a la [`branch testing`](https://github.com/YunoHost-Apps/pepettes_ynh/tree/testing + +Para probar la rama `testing`, sigue asÍ: + +```bash +sudo yunohost app install https://github.com/YunoHost-Apps/pepettes_ynh/tree/testing --debug +o +sudo yunohost app upgrade pepettes -u https://github.com/YunoHost-Apps/pepettes_ynh/tree/testing --debug +``` + +**Mas informaciones sobre el empaquetado de aplicaciones:** diff --git a/README_eu.md b/README_eu.md new file mode 100644 index 0000000..8241b41 --- /dev/null +++ b/README_eu.md @@ -0,0 +1,43 @@ + + +# Pepettes YunoHost-erako + +[![Integrazio maila](https://dash.yunohost.org/integration/pepettes.svg)](https://dash.yunohost.org/appci/app/pepettes) ![Funtzionamendu egoera](https://ci-apps.yunohost.org/ci/badges/pepettes.status.svg) ![Mantentze egoera](https://ci-apps.yunohost.org/ci/badges/pepettes.maintain.svg) + +[![Instalatu Pepettes YunoHost-ekin](https://install-app.yunohost.org/install-with-yunohost.svg)](https://install-app.yunohost.org/?app=pepettes) + +*[Irakurri README hau beste hizkuntzatan.](./ALL_README.md)* + +> *Pakete honek Pepettes YunoHost zerbitzari batean azkar eta zailtasunik gabe instalatzea ahalbidetzen dizu.* +> *YunoHost ez baduzu, kontsultatu [gida](https://yunohost.org/install) nola instalatu ikasteko.* + +## Aurreikuspena + +A simple donation form with stripe + +**Paketatutako bertsioa:** 1.0.1~ynh6 + +**Demoa:** +## Dokumentazioa eta baliabideak + +- Administratzaileen dokumentazio ofiziala: +- Jatorrizko aplikazioaren kode-gordailua: +- YunoHost Denda: +- Eman errore baten berri: + +## Garatzaileentzako informazioa + +Bidali `pull request`a [`testing` abarrera](https://github.com/YunoHost-Apps/pepettes_ynh/tree/testing). + +`testing` abarra probatzeko, ondorengoa egin: + +```bash +sudo yunohost app install https://github.com/YunoHost-Apps/pepettes_ynh/tree/testing --debug +edo +sudo yunohost app upgrade pepettes -u https://github.com/YunoHost-Apps/pepettes_ynh/tree/testing --debug +``` + +**Informazio gehiago aplikazioaren paketatzeari buruz:** diff --git a/README_zh_Hans.md b/README_zh_Hans.md new file mode 100644 index 0000000..3eb92c3 --- /dev/null +++ b/README_zh_Hans.md @@ -0,0 +1,43 @@ + + +# YunoHost 上的 Pepettes + +[![集成程度](https://dash.yunohost.org/integration/pepettes.svg)](https://dash.yunohost.org/appci/app/pepettes) ![工作状态](https://ci-apps.yunohost.org/ci/badges/pepettes.status.svg) ![维护状态](https://ci-apps.yunohost.org/ci/badges/pepettes.maintain.svg) + +[![使用 YunoHost 安装 Pepettes](https://install-app.yunohost.org/install-with-yunohost.svg)](https://install-app.yunohost.org/?app=pepettes) + +*[阅读此 README 的其它语言版本。](./ALL_README.md)* + +> *通过此软件包，您可以在 YunoHost 服务器上快速、简单地安装 Pepettes。* +> *如果您还没有 YunoHost，请参阅[指南](https://yunohost.org/install)了解如何安装它。* + +## 概况 + +A simple donation form with stripe + +**分发版本：** 1.0.1~ynh6 + +**演示：** +## 文档与资源 + +- 官方管理文档： +- 上游应用代码库： +- YunoHost 商店： +- 报告 bug： + +## 开发者信息 + +请向 [`testing` 分支](https://github.com/YunoHost-Apps/pepettes_ynh/tree/testing) 发送拉取请求。 + +如要尝试 `testing` 分支，请这样操作： + +```bash +sudo yunohost app install https://github.com/YunoHost-Apps/pepettes_ynh/tree/testing --debug +或 +sudo yunohost app upgrade pepettes -u https://github.com/YunoHost-Apps/pepettes_ynh/tree/testing --debug +``` + +**有关应用打包的更多信息：** From 7f601c0b17813c010330bcb279e1c6c5fde22868 Mon Sep 17 00:00:00 2001 From: OniriCorpe Date: Wed, 22 May 2024 04:48:53 +0200 Subject: [PATCH 02/14] update to v1.1.1 --- manifest.toml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/manifest.toml b/manifest.toml index 933e677..8cfada0 100644 --- a/manifest.toml +++ b/manifest.toml @@ -5,7 +5,7 @@ name = "Pepettes" description.en = "Simple donation form with stripe" description.fr = "Simple formulaire de don avec stripe" -version = "1.0.1~ynh6" +version = "1.1.1~ynh1" maintainers = ["ljf"] @@ -79,8 +79,8 @@ ram.runtime = "50M" [resources] [resources.sources.main] - url = "https://github.com/YunoHost/pepettes/archive/v1.0.1.tar.gz" - sha256 = "9792ed5589d4a55bd619edc7aa61a1a78f34c5a4e7095b2292ac09b66c8b9a58" + url = "https://github.com/YunoHost/pepettes/archive/refs/tags/v1.1.1.tar.gz" + sha256 = "bbdc2f64afc7597b4a66d2ec3bfe87324f482ffe4681766c79b9938415c366f5" autoupdate.strategy = "latest_github_release" [resources.ports] From 38174ad6db6afe24ac4293706fbcb4ab70f847c5 Mon Sep 17 00:00:00 2001 From: yunohost-bot Date: Wed, 22 May 2024 02:48:58 +0000 Subject: [PATCH 03/14] Auto-update READMEs --- README.md | 2 +- README_es.md | 2 +- README_eu.md | 2 +- README_fr.md | 2 +- README_gl.md | 2 +- README_zh_Hans.md | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index 844d45a..0473a41 100644 --- a/README.md +++ b/README.md @@ -18,7 +18,7 @@ It shall NOT be edited by hand. A simple donation form with stripe -**Shipped version:** 1.0.1~ynh6 +**Shipped version:** 1.1.1~ynh1 **Demo:** ## Documentation and resources diff --git a/README_es.md b/README_es.md index 0a079c9..ae2f8d6 100644 --- a/README_es.md +++ b/README_es.md @@ -18,7 +18,7 @@ No se debe editar a mano. A simple donation form with stripe -**Versión actual:** 1.0.1~ynh6 +**Versión actual:** 1.1.1~ynh1 **Demo:** ## Documentaciones y recursos diff --git a/README_eu.md b/README_eu.md index 8241b41..74b6a14 100644 --- a/README_eu.md +++ b/README_eu.md @@ -18,7 +18,7 @@ EZ editatu eskuz. A simple donation form with stripe -**Paketatutako bertsioa:** 1.0.1~ynh6 +**Paketatutako bertsioa:** 1.1.1~ynh1 **Demoa:** ## Dokumentazioa eta baliabideak diff --git a/README_fr.md b/README_fr.md index 0e0d3e7..d91c2b7 100644 --- a/README_fr.md +++ b/README_fr.md @@ -18,7 +18,7 @@ Il NE doit PAS être modifié à la main. A simple donation form with stripe -**Version incluse :** 1.0.1~ynh6 +**Version incluse :** 1.1.1~ynh1 **Démo :** ## Documentations et ressources diff --git a/README_gl.md b/README_gl.md index 1cd850a..453b2ee 100644 --- a/README_gl.md +++ b/README_gl.md @@ -18,7 +18,7 @@ NON debe editarse manualmente. A simple donation form with stripe -**Versión proporcionada:** 1.0.1~ynh6 +**Versión proporcionada:** 1.1.1~ynh1 **Demo:** ## Documentación e recursos diff --git a/README_zh_Hans.md b/README_zh_Hans.md index 3eb92c3..6bbb526 100644 --- a/README_zh_Hans.md +++ b/README_zh_Hans.md @@ -18,7 +18,7 @@ A simple donation form with stripe -**分发版本：** 1.0.1~ynh6 +**分发版本：** 1.1.1~ynh1 **演示：** ## 文档与资源 From 4b9a3aa8b197ce0f15cbf532734cb73c29501a6a Mon Sep 17 00:00:00 2001 From: OniriCorpe Date: Wed, 22 May 2024 18:38:15 +0200 Subject: [PATCH 04/14] add sandboxing in the systemd config --- conf/systemd.service | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) diff --git a/conf/systemd.service b/conf/systemd.service index 12aeccc..4abad0b 100644 --- a/conf/systemd.service +++ b/conf/systemd.service @@ -12,5 +12,37 @@ ExecReload=/bin/kill -s HUP $MAINPID ExecStop=/bin/kill -s TERM $MAINPID PrivateTmp=true +# Sandboxing options to harden security +# Details for these options: https://www.freedesktop.org/software/systemd/man/systemd.exec.html +NoNewPrivileges=yes +PrivateTmp=yes +PrivateDevices=yes +RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK +RestrictNamespaces=yes +RestrictRealtime=yes +DevicePolicy=closed +ProtectClock=yes +ProtectHostname=yes +ProtectProc=invisible +ProtectSystem=full +ProtectControlGroups=yes +ProtectKernelModules=yes +ProtectKernelTunables=yes +LockPersonality=yes +SystemCallArchitectures=native +SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @setuid @swap @cpu-emulation @privileged + +# Denying access to capabilities that should not be relevant for webapps +# Doc: https://man7.org/linux/man-pages/man7/capabilities.7.html +CapabilityBoundingSet=~CAP_RAWIO CAP_MKNOD +CapabilityBoundingSet=~CAP_AUDIT_CONTROL CAP_AUDIT_READ CAP_AUDIT_WRITE +CapabilityBoundingSet=~CAP_SYS_BOOT CAP_SYS_TIME CAP_SYS_MODULE CAP_SYS_PACCT +CapabilityBoundingSet=~CAP_LEASE CAP_LINUX_IMMUTABLE CAP_IPC_LOCK +CapabilityBoundingSet=~CAP_BLOCK_SUSPEND CAP_WAKE_ALARM +CapabilityBoundingSet=~CAP_SYS_TTY_CONFIG +CapabilityBoundingSet=~CAP_MAC_ADMIN CAP_MAC_OVERRIDE +CapabilityBoundingSet=~CAP_NET_ADMIN CAP_NET_BROADCAST CAP_NET_RAW +CapabilityBoundingSet=~CAP_SYS_ADMIN CAP_SYS_PTRACE CAP_SYSLOG + [Install] WantedBy=multi-user.target From 7563c0db11be49d9510fc5a8d5e4b6b5fbe7ec67 Mon Sep 17 00:00:00 2001 From: OniriCorpe Date: Wed, 22 May 2024 19:11:11 +0200 Subject: [PATCH 05/14] fix systemd sandboxing config --- conf/systemd.service | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/systemd.service b/conf/systemd.service index 4abad0b..6e0b50d 100644 --- a/conf/systemd.service +++ b/conf/systemd.service @@ -30,7 +30,7 @@ ProtectKernelModules=yes ProtectKernelTunables=yes LockPersonality=yes SystemCallArchitectures=native -SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @setuid @swap @cpu-emulation @privileged +SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @setuid @swap @cpu-emulation # Denying access to capabilities that should not be relevant for webapps # Doc: https://man7.org/linux/man-pages/man7/capabilities.7.html From e511b36d191b8fc09b5b41d42207a5250bc748e3 Mon Sep 17 00:00:00 2001 From: OniriCorpe Date: Wed, 22 May 2024 23:00:23 +0200 Subject: [PATCH 06/14] remove useless ynh ssowat thing --- conf/nginx.conf | 15 ++++++--------- 1 file changed, 6 insertions(+), 9 deletions(-) diff --git a/conf/nginx.conf b/conf/nginx.conf index 1876b1e..6e9bf0d 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -1,16 +1,13 @@ #sub_path_only rewrite ^__PATH__$ __PATH__/ permanent; location __PATH__/ { - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - proxy_pass http://unix:__INSTALL_DIR__/sock; - - # Include SSOWAT user panel. - include conf.d/yunohost_panel.conf.inc; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_pass http://unix:__INSTALL_DIR__/sock; } location __PATH__/css/ { - alias __INSTALL_DIR__/assets/css; + alias __INSTALL_DIR__/assets/css; } From 401032fb3b0932baa9845afa69960a58cafa4e8e Mon Sep 17 00:00:00 2001 From: OniriCorpe Date: Wed, 22 May 2024 23:01:01 +0200 Subject: [PATCH 07/14] remove bugged css proxying --- conf/nginx.conf | 4 ---- 1 file changed, 4 deletions(-) diff --git a/conf/nginx.conf b/conf/nginx.conf index 6e9bf0d..afa05c9 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -7,7 +7,3 @@ location __PATH__/ { proxy_set_header X-Forwarded-Proto $scheme; proxy_pass http://unix:__INSTALL_DIR__/sock; } -location __PATH__/css/ { - alias __INSTALL_DIR__/assets/css; -} - From e96294921320ef4e0f3b0758dd24cadf2fd9dc19 Mon Sep 17 00:00:00 2001 From: OniriCorpe Date: Wed, 22 May 2024 23:16:23 +0200 Subject: [PATCH 08/14] do not print a WARNING for locale compilations --- scripts/install | 2 +- scripts/restore | 2 +- scripts/upgrade | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/scripts/install b/scripts/install index 09b0386..8a0a0fa 100755 --- a/scripts/install +++ b/scripts/install @@ -47,7 +47,7 @@ pushd $install_dir venv/bin/pip install --upgrade pip venv/bin/pip install -r requirements.txt venv/bin/pip install gunicorn - venv/bin/pybabel compile -d locales/ + ynh_exec_warn_less venv/bin/pybabel compile -d locales/ mkdir -p /var/log/$app chown -R $app:www-data /var/log/$app chmod o-rwx /var/log/$app diff --git a/scripts/restore b/scripts/restore index 761278f..14cff9a 100755 --- a/scripts/restore +++ b/scripts/restore @@ -30,7 +30,7 @@ pushd $install_dir venv/bin/pip install --upgrade pip venv/bin/pip install -r requirements.txt venv/bin/pip install gunicorn - venv/bin/pybabel compile -d locales/ + ynh_exec_warn_less venv/bin/pybabel compile -d locales/ mkdir -p /var/log/$app chown -R $app:www-data /var/log/$app chmod o-rwx /var/log/$app diff --git a/scripts/upgrade b/scripts/upgrade index 2f94151..97f8c1e 100644 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -51,7 +51,7 @@ pushd $install_dir venv/bin/pip install --upgrade pip venv/bin/pip install -r requirements.txt venv/bin/pip install gunicorn - venv/bin/pybabel compile -d locales/ + ynh_exec_warn_less venv/bin/pybabel compile -d locales/ mkdir -p /var/log/$app chown -R $app:www-data /var/log/$app chmod o-rwx /var/log/$app From 500ba21facb2fd976ff10a39991cb2c02e178b6e Mon Sep 17 00:00:00 2001 From: OniriCorpe Date: Wed, 22 May 2024 23:25:03 +0200 Subject: [PATCH 09/14] update used disk space --- manifest.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/manifest.toml b/manifest.toml index 8cfada0..9d90479 100644 --- a/manifest.toml +++ b/manifest.toml @@ -21,7 +21,7 @@ architectures = "all" multi_instance = true ldap = false sso = false -disk = "50M" +disk = "55M" ram.build = "50M" ram.runtime = "50M" From 48c118b505f7e799cf9efc72d67655d94d6657ed Mon Sep 17 00:00:00 2001 From: OniriCorpe Date: Thu, 23 May 2024 00:16:31 +0200 Subject: [PATCH 10/14] fix prices configuration --- scripts/install | 2 +- scripts/upgrade | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/scripts/install b/scripts/install index 8a0a0fa..fe443e7 100755 --- a/scripts/install +++ b/scripts/install @@ -67,7 +67,7 @@ ynh_script_progression --message="Adding a configuration file..." --weight=1 ynh_add_config --template="../conf/gunicorn.py" --destination="$install_dir/gunicorn.py" ynh_add_config --template="../conf/settings.py" --destination="$install_dir/settings.py" -for price in $(echo $prices | sed "s/,/ /"); do +for price in $(echo $prices | sed "s/,/ /g"); do frequency=$(echo $price | cut -d/ -f1) currency=$(echo $price | cut -d/ -f2) price_id=$(echo $price | cut -d/ -f3) diff --git a/scripts/upgrade b/scripts/upgrade index 97f8c1e..1fc43a8 100644 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -71,7 +71,7 @@ ynh_script_progression --message="Updating a configuration file..." --weight=1 ynh_add_config --template="../conf/gunicorn.py" --destination="$install_dir/gunicorn.py" ynh_add_config --template="../conf/settings.py" --destination="$install_dir/settings.py" -for price in $(echo $prices | sed "s/,/ /"); do +for price in $(echo $prices | sed "s/,/ /g"); do frequency=$(echo $price | cut -d/ -f1) currency=$(echo $price | cut -d/ -f2) price_id=$(echo $price | cut -d/ -f3) From d702fd82cb8b4043c4e80990d6065e5bb4b8196e Mon Sep 17 00:00:00 2001 From: OniriCorpe Date: Thu, 23 May 2024 00:18:10 +0200 Subject: [PATCH 11/14] add USD to default prices --- manifest.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/manifest.toml b/manifest.toml index 9d90479..f2798e0 100644 --- a/manifest.toml +++ b/manifest.toml @@ -75,7 +75,7 @@ ram.runtime = "50M" help.en = "Go on https://dashboard.stripe.com/products to create those donation products" help.fr = "Allez sur https://dashboard.stripe.com/products pour créer ces produits de dons" type = "string" - default = "one_time/EUR/price_1IKuPV,recuring/EUR/price_1IKuPV" + default = "one_time/EUR/price_1IKuPV,recuring/EUR/price_1IKuPV,one_time/USD/price_1IKuPV,recuring/USD/price_1IKuPV" [resources] [resources.sources.main] From 605a5024c5509cf7ffb3170006bed6d641d1b4df Mon Sep 17 00:00:00 2001 From: OniriCorpe Date: Thu, 23 May 2024 00:18:22 +0200 Subject: [PATCH 12/14] bump version --- manifest.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/manifest.toml b/manifest.toml index f2798e0..4b078bc 100644 --- a/manifest.toml +++ b/manifest.toml @@ -5,7 +5,7 @@ name = "Pepettes" description.en = "Simple donation form with stripe" description.fr = "Simple formulaire de don avec stripe" -version = "1.1.1~ynh1" +version = "1.1.1~ynh2" maintainers = ["ljf"] From 885ee3193eca240ac4d2b7daed47910282c42985 Mon Sep 17 00:00:00 2001 From: yunohost-bot Date: Wed, 22 May 2024 22:18:27 +0000 Subject: [PATCH 13/14] Auto-update READMEs --- README.md | 2 +- README_es.md | 2 +- README_eu.md | 2 +- README_fr.md | 2 +- README_gl.md | 2 +- README_zh_Hans.md | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index 0473a41..e2a14ed 100644 --- a/README.md +++ b/README.md @@ -18,7 +18,7 @@ It shall NOT be edited by hand. A simple donation form with stripe -**Shipped version:** 1.1.1~ynh1 +**Shipped version:** 1.1.1~ynh2 **Demo:** ## Documentation and resources diff --git a/README_es.md b/README_es.md index ae2f8d6..f4fb3ec 100644 --- a/README_es.md +++ b/README_es.md @@ -18,7 +18,7 @@ No se debe editar a mano. A simple donation form with stripe -**Versión actual:** 1.1.1~ynh1 +**Versión actual:** 1.1.1~ynh2 **Demo:** ## Documentaciones y recursos diff --git a/README_eu.md b/README_eu.md index 74b6a14..b278623 100644 --- a/README_eu.md +++ b/README_eu.md @@ -18,7 +18,7 @@ EZ editatu eskuz. A simple donation form with stripe -**Paketatutako bertsioa:** 1.1.1~ynh1 +**Paketatutako bertsioa:** 1.1.1~ynh2 **Demoa:** ## Dokumentazioa eta baliabideak diff --git a/README_fr.md b/README_fr.md index d91c2b7..35685e0 100644 --- a/README_fr.md +++ b/README_fr.md @@ -18,7 +18,7 @@ Il NE doit PAS être modifié à la main. A simple donation form with stripe -**Version incluse :** 1.1.1~ynh1 +**Version incluse :** 1.1.1~ynh2 **Démo :** ## Documentations et ressources diff --git a/README_gl.md b/README_gl.md index 453b2ee..602570d 100644 --- a/README_gl.md +++ b/README_gl.md @@ -18,7 +18,7 @@ NON debe editarse manualmente. A simple donation form with stripe -**Versión proporcionada:** 1.1.1~ynh1 +**Versión proporcionada:** 1.1.1~ynh2 **Demo:** ## Documentación e recursos diff --git a/README_zh_Hans.md b/README_zh_Hans.md index 6bbb526..bf6dcb0 100644 --- a/README_zh_Hans.md +++ b/README_zh_Hans.md @@ -18,7 +18,7 @@ A simple donation form with stripe -**分发版本：** 1.1.1~ynh1 +**分发版本：** 1.1.1~ynh2 **演示：** ## 文档与资源 From c05877ea266635d373b9969818668e6b9cd07d33 Mon Sep 17 00:00:00 2001 From: OniriCorpe Date: Thu, 23 May 2024 00:36:21 +0200 Subject: [PATCH 14/14] remove '@setuid' from 'SystemCallFilter' --- conf/systemd.service | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/systemd.service b/conf/systemd.service index 6e0b50d..d642817 100644 --- a/conf/systemd.service +++ b/conf/systemd.service @@ -30,7 +30,7 @@ ProtectKernelModules=yes ProtectKernelTunables=yes LockPersonality=yes SystemCallArchitectures=native -SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @setuid @swap @cpu-emulation +SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @swap @cpu-emulation # Denying access to capabilities that should not be relevant for webapps # Doc: https://man7.org/linux/man-pages/man7/capabilities.7.html